a bunch header injection vulnerability exists from the forgot password features of ArrowCMS Variation 1.0.0. By sending a specifically crafted host header from the forgot password request, it is feasible to send https://www.ralantech.com/mysql-database-health-check-consulting-service/